Configuring Firefox Quantum: Разлика между версии
Редакция без резюме |
Редакция без резюме |
||
| (Не е показана една междинна версия от същия потребител) | |||
| Ред 1: | Ред 1: | ||
== Before you proceed you must do == | == Before you proceed you must do == | ||
* If you have smart card reader and smart card from | * If you have smart card reader and smart card from InfoNotary, but you didn't install the drivers for them do the following [[Installation of smart card reader and smart card drivers in Windows]] | ||
* '''IMPORTANT | * '''IMPORTANT :''' In the information message "Please enter the '''master password for InfoNotary'''", enter your PIN code. | ||
* '''IMPORTANT :''' Firefox and Thunderbird use direct access to the smart card. When you have successfully installed your certificates, you '''SHOULD NOT''' delete them from there, as this will also delete the certificate, along with the private and public keys on the smart card. After that, the certificate cannot be restored and a new one must be issued. | |||
* '''IMPORTANT :''' In order to use your certificate with Firefox and Thunderbird, the reader must be on your computer before opening the program. | |||
Before you can start using the certificate, you must install the Infonotary certificate chain. | |||
== Install InfoNotary certificate chain == | |||
<!--Before you can start using the certificate, you must install the Infonotary certificate chain. | |||
Certificate chain for certificates issued '''before''' 08.01.2018 - [http://www.infonotary.com/site/files/INotaryCertChain.p12 INotaryCertChain.p12]. | Certificate chain for certificates issued '''before''' 08.01.2018 - [http://www.infonotary.com/site/files/INotaryCertChain.p12 INotaryCertChain.p12]. | ||
Certificate chain for certificates issued '''after''' 08.01.2018 - [http://www.infonotary.com/site/files/InfoNotary_Qualified_eIDAS.p12 InfoNotary_Qualified_eIDAS.p12] | Certificate chain for certificates issued '''after''' 08.01.2018 - [http://www.infonotary.com/site/files/InfoNotary_Qualified_eIDAS.p12 InfoNotary_Qualified_eIDAS.p12]--> | ||
Start '''Firefox Quantum'''. From the menu, choose '''Options'''. | Start '''Firefox Quantum'''. From the menu, choose '''Options'''. | ||
| Ред 28: | Ред 31: | ||
[[Файл:MenuFirefoxquantum2cert.png|750px]] | [[Файл:MenuFirefoxquantum2cert.png|750px]] | ||
Specify the path to certification chain - | Specify the path to certification chain - [http://www.infonotary.com/site/files/InfoNotary_Qualified_eIDAS.p12 InfoNotary_Qualified_eIDAS.p12] | ||
[[Файл:MenuFirefoxquantum3cert.png|500px]] | [[Файл:MenuFirefoxquantum3cert.png|500px]] | ||
| Ред 40: | Ред 43: | ||
[[Файл:MenuFirefoxquantum5cert.png|750px]] | [[Файл:MenuFirefoxquantum5cert.png|750px]] | ||
In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on '''Edit Trust'''. The easiest way to do this setting for the certificate "'''InfoNotary CSP Root'''" and/or "'''InfoNotary TSP Root'''" select two possible options. This will make all the InfoNotary trusted certificates for all operations. | In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on '''Edit Trust'''. The easiest way to do this setting for the certificate <!--"'''InfoNotary CSP Root'''" and/or -->"'''InfoNotary TSP Root'''" is to select the two possible options. This will make all the InfoNotary trusted certificates for all operations. | ||
[[Файл:MenuFirefoxquantum6cert.png]] | [[Файл:MenuFirefoxquantum6cert.png]] | ||
Текуща версия към 10:52, 11 февруари 2021
Before you proceed you must do
- If you have smart card reader and smart card from InfoNotary, but you didn't install the drivers for them do the following Installation of smart card reader and smart card drivers in Windows
- IMPORTANT : In the information message "Please enter the master password for InfoNotary", enter your PIN code.
- IMPORTANT : Firefox and Thunderbird use direct access to the smart card. When you have successfully installed your certificates, you SHOULD NOT delete them from there, as this will also delete the certificate, along with the private and public keys on the smart card. After that, the certificate cannot be restored and a new one must be issued.
- IMPORTANT : In order to use your certificate with Firefox and Thunderbird, the reader must be on your computer before opening the program.
Install InfoNotary certificate chain
Start Firefox Quantum. From the menu, choose Options.
From Privacy & Security, choose View Certificates.
Choose the tab Your certificates and click on Import.
Specify the path to certification chain - InfoNotary_Qualified_eIDAS.p12
Leave the field blank and click OK.
Newly installed certificates can be found in section Authorities.
In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on Edit Trust. The easiest way to do this setting for the certificate "InfoNotary TSP Root" is to select the two possible options. This will make all the InfoNotary trusted certificates for all operations.
Install software security module
In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.
Start Firefox Quantum. From the menu, choose Options.
From Privacy & Security, choose Security Devices.
To add a new device, choose Load.
Change the name of the module (Module Name), as desired.
Select PKCS # 11 library corresponding to your smart card.
- Siemens - C:\WINDOWS\system32\siecap11.dll
- Charismathics - C:\WINDOWS\system32\cmP11.dll
- Bit4id - C:\WINDOWS\system32\bit4ipki.dll
In case you use 64 bits version of Firefox or Thunderbird and Charismathics smart card, path to library is C:\WINDOWS\system32\cmP1164.dll.
After you click OK, your smart card will appear in the list of available devices.
